From: Dylan William Hardison <dylan@hardison.net>
Date: Thu, 27 Jul 2017 03:35:55 +0000 (-0700)
Subject: Bug 1384100 - Lock out access to /new-bug in production
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=7a4c46dc5ebef6de0c387c38cf80d8cf34c57c33;p=thirdparty%2Fbugzilla.git

Bug 1384100 - Lock out access to /new-bug in production
---

diff --git a/new_bug.cgi b/new_bug.cgi
index 2e903cfce..7f35f9ebc 100644
--- a/new_bug.cgi
+++ b/new_bug.cgi
@@ -46,6 +46,11 @@ my $cgi      = Bugzilla->cgi;
 my $template = Bugzilla->template;
 my $vars     = {};
 
+unless ($user->in_group('new-bug-testers')) {
+    print $cgi->redirect(correct_urlbase());
+    exit;
+}
+
 if (lc($cgi->request_method) eq 'post') {
      my $token = $cgi->param('token');
      check_hash_token($token, ['new_bug']);